Development #6021: Set a generic cookie after logout to signal that a logout occured recently - Authentic 2 - Redmine Entr’ouvert

Development #6021

Set a generic cookie after logout to signal that a logout occured recently

Ajouté par Benjamin Dauvergne il y a plus de 9 ans. Mis à jour il y a environ 9 ans.

Statut:

Fermé

Priorité:

Normal

Assigné à:

Catégorie:

Version cible:

2.1.12

Début:

27 novembre 2014

Echéance:

% réalisé:

100%

Temps estimé:

Patch proposed:

Oui

Planning:

Description

It should be used by some authentication frontends to prevent autologin loops.

Fichiers

0001-Make-the-logout-set-a-cookie-to-let-other-views-know.patch (1,1 ko) 0001-Make-the-logout-set-a-cookie-to-let-other-views-know.patch

Benjamin Dauvergne, 27 novembre 2014 19:06

Révisions associées

Révision 6a92af92 (diff)
Ajouté par Benjamin Dauvergne il y a plus de 9 ans

Make the logout set a cookie to let other views know that a logout occured recently

Default timeout for this cookie is 60 seconds. Fixes #6021.

Révision e57015b0 (diff)
Ajouté par Benjamin Dauvergne il y a plus de 9 ans

Make the logout set a cookie to let other views know that a logout occured recently

Default timeout for this cookie is 60 seconds. Fixes #6021.

Historique

Mis à jour par Benjamin Dauvergne il y a plus de 9 ans

Fichier 0001-Make-the-logout-set-a-cookie-to-let-other-views-know.patch 0001-Make-the-logout-set-a-cookie-to-let-other-views-know.patch ajouté

Mis à jour par Benjamin Dauvergne il y a plus de 9 ans

Patch proposed changé de Non à Oui

Mis à jour par Frédéric Péters il y a plus de 9 ans

This sounds hackish, but ok. What are the frontends with such a need?

Mis à jour par Benjamin Dauvergne il y a plus de 9 ans

Kerberos which currently use its own mechanism for this, setting a cookie after login preventing autologin for the next 10 minutes. I think that putting a cookie on logout is more robust and gives a behaviour less disturbing for the user.

Pr@tic X509 authentication has autologin too and does something similar to the kerberos plugin and so could also use this generic cookie to improve its behaviour on logout.